A data security management system

Abstract

The present invention discloses a data security management system, which can realize the operation monitoring of a remote cloud data security early warning unit through the coordination scheme among a Trojan virus monitoring module, a transmission data packet loss monitoring module, a transmission data leakage monitoring module, a data leakage IP address access identification module, and a cloud operation record tracking module. In order to determine whether the remote cloud data security early warning unit itself can maintain normal operation in an extreme network environment, the operation monitoring of the remote cloud data security early warning unit can be realized through the coordination scheme among the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module, thereby overcoming the defects that the remote cloud data security early warning unit at this stage only focuses on data monitoring in extreme network environments and early warning prompts for accessing cloud IP addresses, thereby improving the security of cloud data.

Description

Technical Field

[0001] The present invention relates to the field of cloud data security, and in particular to a data security management system. Background Art

[0002] With the development of cloud computing, data is stored in the cloud, and data security has become the most worrying issue for users, focusing mainly on two aspects: one is the worry that cloud operators or cloud operation and maintenance personnel will illegally view, use or leak cloud data; the other is the worry that other tenants will have unauthorized access to their own data, or that tenant data will not be completely deleted after data migration or service cancellation under the tenant usage model, causing the risk of key data leakage.

[0003] The existing technology mainly adopts data application access control technology to realize data access control of cloud users to cloud data and applications; adopts tenant data encryption and distributed tenant security storage technology to solve the problem of multi-tenant data isolation; adopts administrator application security management and control technology to realize key operation audit of cloud operation and maintenance management personnel. Although it can play a certain role in protecting cloud data, there are still a large number of protection loopholes.

[0004] However, the current remote cloud data security early warning unit only focuses on data monitoring in extreme network environments and early warning prompts for access to cloud IP addresses, ignoring whether the remote cloud data security early warning unit itself can maintain normal operation in extreme network environments, and no operation monitoring plan for the remote cloud data security early warning unit has been designed.

[0005] Therefore, at this stage, a data security management system needs to be designed to solve the above problems. Summary of the invention

[0006] The purpose of the present invention is to provide a data security management system, method and storage medium to solve the technical problems existing in the above-mentioned prior art. At present, the remote cloud data security early warning unit only focuses on data monitoring in extreme network environments and early warning prompts for accessing cloud IP addresses, but ignores whether the remote cloud data security early warning unit itself can maintain normal operation in extreme network environments, and no operation monitoring plan for the remote cloud data security early warning unit is designed.

[0007] To achieve the above-mentioned purpose, the technical solution of the present invention is: a data security management system, including a Trojan virus monitoring module, a transmission data packet loss monitoring module, a transmission data leakage monitoring module, a data leakage IP address access identification module, a cloud operation record tracking module, and a server management module, wherein the server management module is respectively connected to the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module; the Trojan virus monitoring module is used to monitor whether a remote cloud data security early warning unit has a virus attack; the transmission data packet loss monitoring module is used to monitor the transmission data of the remote cloud data security early warning unit. whether packet loss occurs; the transmission data leakage monitoring module is used to monitor whether data leakage occurs in the transmission data of the remote cloud data security early warning unit; the data leakage IP address access identification module is used to identify the real-time data leakage IP address of the transmission data of the remote cloud data security early warning unit; the cloud operation record tracking module is used to track the transmission data leakage of the remote cloud data security early warning unit to the initial data receiving end according to the real-time data leakage IP address; the server management module is used to control the startup and shutdown of the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module.

[0008] Furthermore, the server management module controls the Trojan virus monitoring module to be normally open, and controls the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module to be normally closed; when the Trojan virus monitoring module monitors that there is no virus attack on the remote cloud data security early warning unit, the server management module controls the transmission data packet loss monitoring module to be turned on; when the transmission data packet loss monitoring module monitors that there is no packet loss in the transmission data of the remote cloud data security early warning unit, the server management module controls the transmission data leakage monitoring module to be turned on; when the transmission data leakage monitoring module monitors that there is a data leakage in the transmission data of the remote cloud data security early warning unit, the server management module controls the data leakage IP address access identification module and the cloud operation record tracking module to be turned on.

[0009] Furthermore, the data leakage IP address access identification module includes an IP address link monitoring unit, a cloud risk assessment unit, a cloud background operation monitoring unit, and a data encryption key monitoring unit, and the cloud risk assessment unit is respectively connected to the IP address link monitoring unit, the cloud background operation monitoring unit, the data encryption key monitoring unit, and the server management module; the IP address link monitoring unit is used to collect real-time connection transmission data of the port inside the remote cloud data security early warning unit, and identify the real-time data leakage IP address of the transmission data of the remote cloud data security early warning unit according to the real-time connection transmission data; the cloud background operation monitoring unit is used to monitor the real-time cloud background operation of the environment where the remote cloud data security early warning unit is located, and determine whether the real-time cloud background operation can support the normal operation of the IP address link monitoring unit; the data encryption key monitoring unit is used to provide data encryption key monitoring for the environment where the remote cloud data security early warning unit is located.

[0010] Furthermore, the cloud risk assessment unit controls the IP address link monitoring unit, the cloud background operation monitoring unit, and the data encryption key monitoring unit to be normally closed; when the server management module controls the data leakage IP address access identification module to be turned on, the cloud risk assessment unit controls the cloud background operation monitoring unit to be turned on; if the cloud background operation monitoring unit determines that the real-time cloud background operation can support the normal operation of the IP address link monitoring unit, the cloud risk assessment unit controls the IP address link monitoring unit, otherwise, the cloud risk assessment unit controls the IP address link monitoring unit and the data encryption key monitoring unit to be turned on.

[0011] Furthermore, the data leakage IP address access identification module also includes a redundant data byte size monitoring unit and a redundant data automatic deletion unit, and the cloud risk assessment unit is respectively connected to the redundant data byte size monitoring unit and the redundant data automatic deletion unit; the redundant data byte size monitoring unit is used to monitor whether noise data is attached to the IP address link monitoring redundant data of the IP address link monitoring unit; the redundant data automatic deletion unit is used to automatically delete the IP address link monitoring redundant data of the IP address link monitoring unit.

[0012] Furthermore, the cloud risk assessment unit controls the redundant data byte size monitoring unit and the redundant data automatic deletion unit to be normally closed; when the IP address link monitoring unit cannot normally collect the real-time connection transmission data of the port inside the remote cloud data security early warning unit, the cloud risk assessment unit controls the redundant data byte size monitoring unit to be turned on; when the redundant data byte size monitoring unit monitors that noise data is attached to the IP address link monitoring redundant data of the IP address link monitoring unit, the cloud risk assessment unit controls the redundant data automatic deletion unit to be turned on.

[0013] Furthermore, it also includes a wired communication module and a 5G base station, and the server management module is connected to the 5G base station network through the wired communication module.

[0014] A data security management method adopts a data security management system as described above to perform cloud data security emergency warning management.

[0015] A storage medium stores a computer program, which executes a data security management method as described above when executed.

[0016] Compared with the prior art, the beneficial effects of the present invention are as follows: One of the beneficial effects of this solution is that, in view of whether the remote cloud data security early warning unit itself can maintain normal operation in an extreme network environment, through the coordination scheme between the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module, the operation monitoring of the remote cloud data security early warning unit can be realized, overcoming the defects that the remote cloud data security early warning unit at this stage only focuses on data monitoring in extreme network environments and early warning prompts for access to cloud IP addresses. Through the orderly coordination and startup of each module, it is possible to avoid excessive monitoring and tracking modules from being ineffective for a long time, thereby improving data security; when a non-virus attack is detected on the remote cloud data security early warning unit, packet loss monitoring is performed first, and then data leakage monitoring is performed, and the data leakage IP address is identified, so that the remote cloud data security early warning unit itself can be accurately located for abnormalities, thereby cooperating with the subsequent tracking module for automatic tracking, etc. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 This is a schematic diagram of the system structure of the implementation scheme.

[0018] Figure 2 This is a schematic diagram of the system operation principle of the implementation scheme. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention, that is, the embodiments described are only part of the embodiments of the present invention, rather than all of the embodiments. The components of the embodiments of the present invention described and shown in the drawings herein can be arranged and designed in various different configurations.

[0020] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely represents selected embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative work are within the scope of protection of the present invention. It should be noted that relational terms such as the terms "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations.

[0021] Moreover, the terms "comprises", "includes" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or apparatus that includes a list of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or apparatus. In the absence of more restrictions, an element defined by the phrase "comprises a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus that includes the element.

[0022] like Figure 1As shown, a data security management system is proposed, including a Trojan virus monitoring module, a transmission data packet loss monitoring module, a transmission data leakage monitoring module, a data leakage IP address access identification module, a cloud operation record tracking module, and a server management module. The server management module is respectively connected to the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module; the Trojan virus monitoring module (such as antivirus software) is used to monitor whether a remote cloud data security early warning unit has a virus attack; the transmission data packet loss monitoring module is used to monitor whether the transmission data of the remote cloud data security early warning unit has a virus attack packet loss occurs; the transmission data leakage monitoring module is used to monitor whether the transmission data of the remote cloud data security early warning unit has data leakage; the data leakage IP address access identification module is used to identify the real-time data leakage IP address of the transmission data of the remote cloud data security early warning unit; the cloud operation record tracking module is used to track the transmission data leakage of the remote cloud data security early warning unit to the initial data receiving end according to the real-time data leakage IP address; the server management module is used to control the startup and shutdown of the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module.

[0023] In the above scheme, in order to determine whether the remote cloud data security early warning unit itself can maintain normal operation in an extreme network environment, the operation monitoring of the remote cloud data security early warning unit can be realized through the coordination of the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module, thereby overcoming the defect that the remote cloud data security early warning unit at this stage only focuses on data monitoring in extreme network environments and early warning prompts for access to cloud IP addresses.

[0024] Further, such as Figure 2 As shown,

[0025] Step S1, the server management module controls the Trojan virus monitoring module to be normally open, and controls the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module to be normally closed;

[0026] Step S2: When the Trojan virus monitoring module detects that there is no virus attack on the remote cloud data security warning unit, the server management module controls the transmission data packet loss monitoring module to start;

[0027] Step S3: when the transmission data packet loss monitoring module monitors that no packet loss occurs in the transmission data of the remote cloud data security early warning unit, the server management module controls the transmission data leakage monitoring module to start;

[0028] Step S4: When the transmission data leakage monitoring module monitors that the transmission data of the remote cloud data security early warning unit has a data leakage, the server management module controls the data leakage IP address access identification module and the cloud operation record tracking module to start.

[0029] In the above scheme, through the orderly coordination and startup among the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module, it is possible to avoid excessive and long-term ineffective actions of the monitoring and tracking modules, thereby improving data security; when a non-virus attack is detected on the remote cloud data security early warning unit, packet loss monitoring is performed first, then data leakage monitoring is performed, and the data leakage IP address is identified, so that the remote cloud data security early warning unit itself can be accurately located for abnormalities, thereby cooperating with the subsequent tracking module for automatic tracking, etc.

[0030] Furthermore, the data leakage IP address access identification module includes an IP address link monitoring unit, a cloud risk assessment unit, a cloud background operation monitoring unit, and a data encryption key monitoring unit, and the cloud risk assessment unit is respectively connected to the IP address link monitoring unit, the cloud background operation monitoring unit, the data encryption key monitoring unit, and the server management module; the IP address link monitoring unit is used to collect real-time connection transmission data of the port inside the remote cloud data security early warning unit, and identify the real-time data leakage IP address of the transmission data of the remote cloud data security early warning unit according to the real-time connection transmission data; the cloud background operation monitoring unit is used to monitor the real-time cloud background operation of the environment where the remote cloud data security early warning unit is located, and determine whether the real-time cloud background operation can support the normal operation of the IP address link monitoring unit; the data encryption key monitoring unit is used to provide data encryption key monitoring for the environment where the remote cloud data security early warning unit is located.

[0031] Furthermore, the cloud risk assessment unit controls the IP address link monitoring unit, the cloud background operation monitoring unit, and the data encryption key monitoring unit to be normally closed; when the server management module controls the data leakage IP address access identification module to be turned on, the cloud risk assessment unit controls the cloud background operation monitoring unit to be turned on; if the cloud background operation monitoring unit determines that the real-time cloud background operation can support the normal operation of the IP address link monitoring unit, the cloud risk assessment unit controls the IP address link monitoring unit, otherwise, the cloud risk assessment unit controls the IP address link monitoring unit and the data encryption key monitoring unit to be turned on, so as to avoid the data encryption key monitoring unit from malfunctioning.

[0032] In the above scheme, when the data leakage IP address access identification module is realized by collecting connection transmission data, it is taken into consideration that the connection transmission collection of the IP address link monitoring unit may be affected at night; therefore, a coordination scheme is designed among the IP address link monitoring unit, the cloud background operation monitoring unit, and the data encryption key monitoring unit to overcome the above defects.

[0033] Furthermore, the data leakage IP address access identification module also includes a redundant data byte size monitoring unit and a redundant data automatic deletion unit, and the cloud risk assessment unit is respectively connected to the redundant data byte size monitoring unit and the redundant data automatic deletion unit; the redundant data byte size monitoring unit is used to monitor whether noise data is attached to the IP address link monitoring redundant data of the IP address link monitoring unit; the redundant data automatic deletion unit is used to automatically delete the IP address link monitoring redundant data of the IP address link monitoring unit.

[0034] Furthermore, the cloud risk assessment unit controls the redundant data byte size monitoring unit and the redundant data automatic deletion unit to be normally closed; when the IP address link monitoring unit cannot normally collect the real-time connection transmission data of the port inside the remote cloud data security early warning unit, the cloud risk assessment unit controls the redundant data byte size monitoring unit to be turned on; when the redundant data byte size monitoring unit monitors that noise data is attached to the IP address link monitoring redundant data of the IP address link monitoring unit, the cloud risk assessment unit controls the redundant data automatic deletion unit to be turned on.

[0035] In the above scheme, considering that the environment in which the remote cloud data security early warning unit is located is extremely harsh, the redundant data of the IP address link monitoring unit is easily attached with noise data, resulting in the IP address link monitoring unit being unable to normally collect the real-time connection transmission data of the port inside the remote cloud data security early warning unit; therefore, a coordination scheme between the redundant data byte size monitoring unit and the redundant data automatic deletion unit is designed to overcome the above defects.

[0036] Furthermore, it also includes a wired communication module and a 5G base station. The server management module is connected to the 5G base station network through the wired communication module, thereby realizing remote data interaction.

[0037] A data security management method adopts a data security management system as described above to perform cloud data security emergency warning management.

[0038] The embodiment of the present invention also provides a computer device for implementing and applying to a data security management system.

[0039] The computer device may include a processor, a memory, and a bus, and may also include a computer program stored in the memory and executable on the processor, such as a data security management program.

[0040] Among them, the memory includes at least one type of readable storage medium, and the readable storage medium includes flash memory, mobile hard disk, multimedia card, card-type memory (for example: SD or DX memory, etc.), magnetic memory, disk, optical disk, etc. The memory can be an internal storage unit of a computer device in some embodiments, such as a mobile hard disk of the computer device. The memory can also be an external storage device of a computer device in other embodiments, such as a plug-in mobile hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the computer device. Further, the memory can also include both an internal storage unit of the computer device and an external storage device. The memory can not only be used to store application software and various types of data installed in the computer device, such as codes used for data security management, etc., but also can be used to temporarily store data that has been output or is to be output.

[0041] In some embodiments, the processor may be composed of an integrated circuit, for example, a single packaged integrated circuit, or a plurality of packaged integrated circuits with the same or different functions, including one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and combinations of various control chips. The processor is the control core (Control Unit) of the computer device, and uses various interfaces and lines to connect the various components of the entire computer device, and executes or executes programs or modules stored in the memory (such as a temperature-measurable monitoring program for monitoring video, etc.), and calls data stored in the memory to execute various functions of the computer device and process data.

[0042] The bus may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. The bus is configured to realize connection and communication between the memory and at least one processor, etc.

[0043] It will be appreciated by those skilled in the art that fewer or more components may be included, or certain components may be combined, or the components may be arranged differently.

[0044] For example, although not shown, the computer device may also include a power source (such as a battery) for supplying power to each component. Preferably, the power source may be logically connected to at least one processor through a power management device, so that the power management device can realize functions such as charging management, discharging management, and power consumption management. The power source may also include any components such as one or more DC or AC power sources, recharging devices, power failure detection circuits, power converters or inverters, and power status indicators. The computer device may also include a variety of sensors, Bluetooth modules, Wi-Fi modules, etc., which will not be repeated here.

[0045] Furthermore, the computer device may also include a network interface. Optionally, the network interface may include a wired interface and / or a wireless interface (such as a WI-FI interface, a Bluetooth interface, etc.), which is usually used to establish a communication connection between the computer device and other computer devices.

[0046] Optionally, the computer device may further include a user interface, which may be a display, an input unit (such as a keyboard), or a standard wired interface or a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, or an OLED (Organic Light-Emitting Diode) touch device. The display may also be appropriately referred to as a display screen or a display unit, which is used to display information processed in the computer device and to display a visual user interface.

[0047] It should be understood that the embodiment is for illustration only and the scope of the patent application is not limited to this structure.

[0048] The temperature-measurable monitoring program applied to monitoring video and stored in the memory in the computer device is a combination of multiple instructions.

[0049] Specifically, the specific implementation method of the processor for the above instructions can refer to Figure 1 to Figure 2 The description of the relevant steps in the corresponding embodiments will not be repeated here.

[0050] Furthermore, if the module / unit integrated into the computer device is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. The computer-readable storage medium can be volatile or non-volatile. For example, the computer-readable medium can include: any entity or device capable of carrying the computer program code, a recording medium, a USB flash drive, a mobile hard disk, a magnetic disk, an optical disk, a computer memory, and a read-only memory (ROM).

[0051] A storage medium stores a computer program, which executes a data security management method as described above when executed.

[0052] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "set", "install", "connect", "connect", and "fix" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood by specific circumstances.

[0053] Although embodiments of the present invention have been shown and described, it will be understood by those skilled in the art that various equivalent changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A data security management system, characterized in that: It includes a Trojan virus monitoring module, a transmission data packet loss monitoring module, a transmission data leakage monitoring module, a data leakage IP address access identification module, a cloud operation record tracking module, and a server management module. The server management module is connected to the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module respectively; The Trojan virus monitoring module is used to monitor whether a virus attack occurs in the remote cloud data security early warning unit; The transmission data packet loss monitoring module is used to monitor whether the transmission data of the remote cloud data security early warning unit has packet loss; The transmission data leakage monitoring module is used to monitor whether the transmission data of the remote cloud data security early warning unit has data leakage; The data leakage IP address access identification module is used to identify the real-time data leakage IP address of the transmission data of the remote cloud data security early warning unit; The cloud operation record tracking module is used to track the transmission data leakage of the remote cloud data security early warning unit to the initial data receiving end according to the real-time data leakage IP address; The server management module is used to control the startup and shutdown of the Trojan virus monitoring module, the transmission data packet loss monitoring module, the transmission data leakage monitoring module, the data leakage IP address access identification module, and the cloud operation record tracking module; The server management module controls the Trojan virus monitoring module to be normally open, and controls the transmission data packet loss monitoring module, transmission data leakage monitoring module, data leakage IP address access identification module, and cloud operation record tracking module to be normally closed; When the Trojan virus monitoring module monitors that there is no virus attack on the remote cloud data security early warning unit, the server management module controls the transmission data packet loss monitoring module to start; When the transmission data packet loss monitoring module monitors that no packet loss occurs in the transmission data of the remote cloud data security early warning unit, the server management module controls the transmission data leakage monitoring module to start; When the transmission data leakage monitoring module monitors that the transmission data of the remote cloud data security early warning unit has a data leakage, the server management module controls the data leakage IP address access identification module and the cloud operation record tracking module to start; The data leakage IP address access identification module includes an IP address link monitoring unit, a cloud risk assessment unit, a cloud background operation monitoring unit, and a data encryption key monitoring unit, and the cloud risk assessment unit is connected to the IP address link monitoring unit, the cloud background operation monitoring unit, the data encryption key monitoring unit, and the server management module respectively; The IP address link monitoring unit is used to collect real-time connection transmission data of the port inside the remote cloud data security early warning unit, and identify the real-time data leakage IP address of the transmission data of the remote cloud data security early warning unit according to the real-time connection transmission data; The cloud background operation monitoring unit is used to monitor the real-time cloud background operation of the environment where the remote cloud data security warning unit is located, and determine whether the real-time cloud background operation can support the normal operation of the IP address link monitoring unit; the data encryption key monitoring unit is used to provide data encryption key monitoring for the environment where the remote cloud data security warning unit is located; The cloud risk assessment unit controls the IP address link monitoring unit, the cloud background operation monitoring unit, and the data encryption key monitoring unit to be normally closed; When the server management module controls the data leakage IP address access identification module to be turned on, the cloud risk assessment unit controls the cloud background operation monitoring unit to be turned on; If the cloud background operation monitoring unit determines that the real-time cloud background operation can support the normal operation of the IP address link monitoring unit, the cloud risk assessment unit controls the IP address link monitoring unit, otherwise, the cloud risk assessment unit controls the IP address link monitoring unit and the data encryption key monitoring unit to start; The data leakage IP address access identification module further includes a redundant data byte size monitoring unit and a redundant data automatic deletion unit, and the cloud risk assessment unit is connected to the redundant data byte size monitoring unit and the redundant data automatic deletion unit respectively; The redundant data byte size monitoring unit is used to monitor whether noise data is attached to the IP address link monitoring redundant data of the IP address link monitoring unit; the redundant data automatic deletion unit is used to automatically delete the IP address link monitoring redundant data of the IP address link monitoring unit; The cloud risk assessment unit controls the redundant data byte size monitoring unit and the redundant data automatic deletion unit to be normally closed; When the IP address link monitoring unit cannot normally collect the real-time connection transmission data of the port inside the remote cloud data security early warning unit, the cloud risk assessment unit controls the redundant data byte size monitoring unit to start; When the redundant data byte size monitoring unit monitors that noise data is attached to the IP address link monitoring redundant data of the IP address link monitoring unit, the cloud risk assessment unit controls the redundant data automatic deletion unit to start; It also includes a wired communication module and a 5G base station, and the server management module is connected to the 5G base station network through the wired communication module.

Images